feat: stop keeping buspro password hash in the session

src/Security/BpnAuthenticator.php

@@ -73,7 +73,7 @@ class BpnAuthenticator extends AbstractLoginFormAuthenticator implements Authent
         $csrfToken = $request->request->getString('_csrf_token');
 
         return new SelfValidatingPassport(
-            new UserBadge($email, function () use ($email, $password, $request) {
+            new UserBadge($email, function () use ($email, $password) {
                 try {
                     $response = $this->apiClient->getProfile($email, $password);
                 } catch (ApiClientException $e) {
@@ -91,9 +91,6 @@ class BpnAuthenticator extends AbstractLoginFormAuthenticator implements Authent
                     return null;
                 }
 
-                // Store BPN password in session for later use
-                $request->getSession()->set('bpn_password', $password);
-
                 return $user;
             }),
             [